Skip to content
Noroxi

FLAC records

6 published records for vendor flac.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
5
With a fix record
100%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    6 records
    • CVE-2007-4619
      39Monitor

      Multiple integer overflows in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1, as used in Winamp before 5.5 and other products, allow

      CriticalCVSS 9.3No exploitEPSS 7%

      flac · libflacOct 12, 2007

    • CVE-2007-6277
      39Monitor

      Multiple buffer overflows in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allow user-assisted remote attackers to execute arbitrary

      CriticalCVSS 9.3No exploitEPSS 7%

      flac · libflacDec 7, 2007

    • CVE-2007-6279
      38Monitor

      Multiple double free vulnerabilities in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allow user-assisted remote attackers to execut

      CriticalCVSS 9.3No exploitEPSS 4%

      flac · libflacDec 7, 2007

    • CVE-2007-6278
      38Monitor

      Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allows user-assisted remote attackers to force a client to download arbitrary files vi

      CriticalCVSS 9.3No exploitEPSS 2%

      flac · libflacDec 7, 2007

    • CVE-2014-8962
      33Monitor

      Stack-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .fla

      HighCVSS 7.5No exploitEPSS 10%

      flac · libflacNov 26, 2014

    • CVE-2014-9028
      33Monitor

      Heap-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac

      HighCVSS 7.5No exploitEPSS 10%

      flac · libflacNov 26, 2014